Protobuf Decoder
Summary: PortSwigger's BApp Store lists a Burp Suite extension called Protobuf Decoder, authored by Marcin Wielgoszewski, DinoSec, and Kai Qiang Tang, at version 1.5 and last updated 04 August 2021. The extension decodes and beautifies protobuf responses, opening a custom tab in Burp's message editor when it detects a response with the "Content-Type: application/x-protobuf" header, and it can use a .proto file to define the message format; it requires Jython version 2.7 or later.
What's compelling: Protobuf responses are binary and opaque in a proxy by default, so testers reviewing an API that speaks protobuf are working without readable payloads unless a decoder like this is installed. PortSwigger states it makes no warranty about third-party extensions' quality or usefulness, and this one's last update was 04 August 2021.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026